How To
Ideas from Security Awareness Survey Respondents
Practical steps to establishing employee security awareness
By CSO Contributor
November 01, 2006 — CSO —
• Live events help lessons sink in. Hold monthly brown-bag awareness lunches for departments or remote facilities.
• Stay in people's faces: Publish a monthly newsletter on current security threats and issues. Report security metrics, both good and bad.
• Find ways of expressing the cost-avoidance benefits of improved security. For example, put a dollar amount on fewer incidents and shorter recovery times.
• Have the CEO and other top executives attend security Q&A meetings (and have them take some questions). Make sure important security memos go out under the CEO's name.
• Have direct contact with employees. Manage by walking around!
• When new threats emerge, act quickly to inform the enterprise. Demystify but don't scare.
• Make awareness initiatives vivid so that they are felt on a personal gut level by individual employees.
• Engage in multimedia education: posters, online tutorials, live events, podcasts.
• Focus on high-value awareness initiatives: loss-prevention in retail businesses, counter-
competitive-intelligence strategies in research-rich environments, data privacy in financial institutions.
*–L.M.
Data Center Directions Virtual Conference
Attend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.
The Surest Path to Effective and Efficient Compliance
In this webcast, we explore why and how — with best practices, practical tips and solutions that work — to ease your compliance challenge.
- Make Compliance Regulations an Ally Not an Enemy
- Protecting Sensitive and Confidential Information with Endpoint Security
- Endpoint Security: Compliance at the Endpoint
- Revolutionizing Endpoint Security with a Single Agent
- Data Protection: Challenges for the Traveling User
- View Gartner Video: Best Practices on Web Application Security
- Unlock the Power of Device ID to Combat Online Fraud and Abuse
- Network Security Services: Outsourcing considerations for maximizing network protection
- File Integrity Monitoring: Secure Your Virtual and Physical IT Environments
- Configuration Assessment: Choosing the Right Solution
- IT Service Management: Metrics That Matter
- Effective Security with a Continuous Approach to ISO 27001
Get instant notifications when whitepapers, webcasts and case studies are added
to our library. Sign up for a Resource Alert now!
CSO Corporate Partners
CSO Executive Seminar on Application Security
-
January 29, 2009New York, New YorkRegister now »
-
February 25, 2009San Francisco, CaliforniaRegister now »
(ISC)2 members can earn up to 6 CPE Credits
Reference priority code ONLINE and attend this program as our guest — that's a $295 savings!
